CWE-463Base

Deletion of Data Structure Sentinel

Incomplete in the CWE catalog · 1 CVE mapped

1
CVEs mapped
5.3
Median CVSS
What it is

The accidental deletion of a data-structure sentinel can cause serious programming logic problems.

Recent examples
5.3cvss
CVE-2024-13318

Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion

The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-463
Abstraction
Base
Structure
Simple
Status
Incomplete
References (1)
https://cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf